{"id":15996,"date":"2018-02-21T16:32:47","date_gmt":"2018-02-21T16:32:47","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/"},"modified":"2026-08-08T17:48:50","modified_gmt":"2026-08-08T17:48:50","slug":"north-koreas-growing-criminal-cyberthreat","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/","title":{"rendered":"North Korea&#8217;s growing criminal cyberthreat"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The countries posing the greatest cyberthreats to the United States are <a href=\"https:\/\/theconversation.com\/tracing-the-sources-of-todays-russian-cyberthreat-81593\" title=\"\" class=\"\">Russia<\/a>, <a href=\"https:\/\/theconversation.com\/how-the-chinese-cyberthreat-has-evolved-82469\" title=\"\" class=\"\">China<\/a>, <a href=\"https:\/\/theconversation.com\/following-the-developing-iranian-cyberthreat-85162\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover533480\">Iran<\/a> and North Korea. Like its counterparts, Kim Jong Un\u2019s regime engages in substantial cyber espionage. And like Russia and Iran, it launches damaging cyberattacks that wipe data from computer disks and shut down online services.<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But the North Korean cyberthreat is different in two ways. First, the regime\u2019s online power did not grow out of groups of independent hackers. Even today, it seems unlikely the country has hackers who operate independent of the government. Second, North Korea\u2019s cybercrime efforts \u2014 all seemingly state-sponsored \u2014 steal money that is then used to fund its cash-strapped government.<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Government-controlled hacking<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One reason for North Korea\u2019s apparent lack of independent hackers is that most North Koreans do not have internet access. Although the country has had an <a href=\"https:\/\/arstechnica.com\/information-technology\/2017\/10\/as-us-launches-ddos-attacks-n-korea-gets-more-bandwidth-from-russia\/\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover987144\">internet connection through China<\/a> for several years, <a href=\"https:\/\/fas.org\/sgp\/crs\/row\/R44912.pdf\" data-original-title=\"\" title=\"\" class=\"\">it\u2019s reserved<\/a> for elites and foreign visitors. Would-be hackers can\u2019t launch attacks across borders; they can\u2019t even pick up hacking manuals, code and tips from the many online forums that other hackers in other nations use to learn the trade and share information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On top of that, North Korea maintains exceptionally strong controls over its population. Any hacking attributed to North Korea is likely done for the government if not by the government directly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>State-sponsored hackers<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">North Korea\u2019s <a href=\"http:\/\/www.keia.org\/publication\/north-koreas-cyber-warfare-and-challenges-us-rok-alliance\" data-original-title=\"\" title=\"\" class=\"\">cyber warriors<\/a> work primarily for the General Bureau of Reconnaissance or the General Staff Department of the Korean People\u2019s Army. Prospective candidates are selected from schools across the country and trained in cyber operations at <a href=\"http:\/\/www.zdnet.com\/article\/a-glimpse-into-the-world-of-north-koreas-hacking-elite\/\" data-original-title=\"\" title=\"\" class=\"\">Pyongyang University of Automation<\/a> and other colleges and universities. By 2015, the South Korean military estimated the KPA employed <a href=\"http:\/\/www.telegraph.co.uk\/news\/worldnews\/asia\/northkorea\/11329480\/North-Korea-doubles-its-cyber-warfare-team-to-6000-troops.html\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover629765\">up to 6,000 cyber warfare experts<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">North Korean hackers operate from facilities in <a href=\"http:\/\/www.keia.org\/publication\/north-koreas-cyber-warfare-and-challenges-us-rok-alliance\" title=\"\" class=\"\">China and other foreign countries<\/a> where their government sends or permits them to work. Indeed, the country has reportedly sent hundreds of hackers into nearby countries to <a href=\"https:\/\/www.bloomberg.com\/news\/features\/2018-02-07\/inside-kim-jong-un-s-hacker-army\" data-original-title=\"\" title=\"\" class=\"\">raise money<\/a> for the regime. Many of the cyberattacks attributed to North Korea have been <a href=\"https:\/\/www.reuters.com\/article\/us-cyber-northkorea-exclusive\/exclusive-north-koreas-unit-180-the-cyber-warfare-cell-that-worries-the-west-idUSKCN18H020\" title=\"\" class=\"selected-link\" data-original-title=\"\" aria-describedby=\"popover535192\">traced back to locations inside China<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>From espionage to sabotage<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">North Korea has been using cyber operations <a href=\"http:\/\/faculty.nps.edu\/dedennin\/publications\/CNO%20threat.pdf\" data-original-title=\"\" title=\"\" class=\"\">to spy on<\/a> the U.S. and South Korea since at least 2004. U.S. targets have included <a href=\"https:\/\/www.nytimes.com\/2017\/10\/10\/world\/asia\/north-korea-hack-war-plans.html\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover680589\">military entities<\/a> and the State Department. North Korea uses cyber espionage to acquire foreign technology, including <a href=\"http:\/\/money.cnn.com\/2017\/10\/31\/news\/north-korea-hack-stole-south-korea-warship-plans\/index.html\" data-original-title=\"\" title=\"\" class=\"\">technologies relating to weapons<\/a> of mass destruction, unmanned aerial vehicles and missiles.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By 2009, North Korea had expanded its cyber operations to include acts of sabotage. The first of these <a href=\"https:\/\/www.csmonitor.com\/Technology\/Horizons\/2009\/0708\/north-korean-hackers-blamed-for-sweeping-cyber-attack-on-us-networks\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover204072\">took place in July 2009<\/a>, when massive distributed denial of service (DDoS) attacks shut down targets in the U.S. and South Korea. The attackers also used \u201cwiper\u201d malware to delete data on disks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">North Korea has continued to <a href=\"https:\/\/www.symantec.com\/connect\/blogs\/four-years-darkseoul-cyberattacks-against-south-korea-continue-anniversary-korean-war\" title=\"\" class=\"\">launch DDoS and disk-wiping attacks<\/a> over the years, targeting banks as well as other military and civilian systems in the U.S. and South Korea. A cyberattack in April 2011 against South Korea\u2019s agricultural banking cooperative Nonghyup was said to <a href=\"https:\/\/www.reuters.com\/article\/us-korea-north-cyber\/north-korea-hackers-behind-attack-on-s-korea-bank-prosecutors-idUSTRE7421Q520110503\" title=\"\" class=\"selected-link\" data-original-title=\"\" aria-describedby=\"popover160648\">shut down the bank\u2019s credit card and ATM services<\/a> for more than a week.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In December 2014, the North\u2019s attackers hit desktop computers in a South Korean <a href=\"https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/cyber-attacks\/korean-nuclear-plant-faces-data-leak-and-destruction\" title=\"\" class=\"\">nuclear plant<\/a> with wiper malware that destroyed not only the data on hard drives, but also the master boot record startup software, making recovery more difficult. In addition, the attack stole and leaked blueprints and employee information from the plant.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">North Korea has also been accused of trying to <a href=\"https:\/\/www.nbcnews.com\/news\/north-korea\/experts-north-korea-targeted-u-s-electric-power-companies-n808996\" title=\"\" class=\"\">hack electric power companies<\/a> in the U.S. and a <a href=\"https:\/\/www.thestar.com\/news\/gta\/2018\/01\/23\/metrolinx-targeted-by-north-korean-cyberattack.html\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover819470\">railroad system<\/a> in Canada.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>The attack on Sony<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The attack on the nuclear facility took place about a month after North Korea attacked <a href=\"https:\/\/fortune.com\/sony-hack-part-1\/\" title=\"\" class=\"\">Sony Pictures<\/a> with wiper malware that zapped <a href=\"https:\/\/www.washingtonpost.com\/news\/the-switch\/wp\/2014\/12\/18\/the-sony-pictures-hack-explained\/?utm_term=.04b27501bbc7\" title=\"\" class=\"\">over 4,000 of the company\u2019s desktop computers<\/a> and servers. The attackers also stole and posted pre-release movies and <a href=\"https:\/\/www.theguardian.com\/technology\/2014\/dec\/14\/sony-pictures-email-hack-greed-racism-sexism\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover198616\">sensitive, often embarrassing, emails<\/a> and other data taken from the company.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Calling themselves the \u201cGuardians of Peace,\u201d the attackers demanded that Sony withhold release of the satirical film \u201c<a href=\"http:\/\/www.imdb.com\/title\/tt2788710\/\" data-original-title=\"\" title=\"\" class=\"\">The Interview<\/a>,\u201d which depicts an assassination attempt against North Korea\u2019s leader, Kim Jong Un. The attackers also <a href=\"https:\/\/www.theguardian.com\/film\/2014\/dec\/16\/employees-sue-failure-guard-personal-data-leaked-hackers\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover986931\">threatened violence<\/a> against any movie theaters showing the film.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Although theaters initially canceled their scheduled showings, ultimately <a href=\"https:\/\/deadline.com\/2017\/04\/as-north-korea-rumbles-insiders-tell-how-small-players-stood-tall-helping-sonys-the-interview-1202069868\/\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover924084\">the film was released<\/a> both online and in theaters. North Korea\u2019s <a href=\"https:\/\/www.cfr.org\/blog\/north-koreas-offensive-cyber-program-might-be-good-it-effective\" data-original-title=\"\" title=\"\" class=\"\">coercive attempts<\/a> failed, as they have in other cases.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"2864\" height=\"1800\" src=\"\/wp-content\/uploads\/2026\/08\/AP_17227135462256.jpg.jpg\" alt=\"\" class=\"wp-image-47810\" srcset=\"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP_17227135462256.jpg.jpg 2864w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP_17227135462256.jpg.jpg?resize=300,189 300w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP_17227135462256.jpg.jpg?resize=768,483 768w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP_17227135462256.jpg.jpg?resize=1024,644 1024w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP_17227135462256.jpg.jpg?resize=1536,965 1536w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP_17227135462256.jpg.jpg?resize=2048,1287 2048w\" sizes=\"auto, (max-width: 2864px) 100vw, 2864px\" \/><figcaption class=\"wp-element-caption\">FILE &#8211; In this Dec. 22, 2014, file photo, a South Korean army soldier walks near a TV screen showing an advertisement of Sony Picture&#8217;s &#8220;The Interview,&#8221; at the Seoul Railway Station in Seoul, South Korea.  North Korea has a long track record of issuing threats and ultimatums that don\u2019t necessary lead to action. Then again, when it does act &#8211; often without warning &#8211; it can be fatal.  Washington claims North Korea carried out this massive hack in 2014 to get revenge against Sony Entertainment for distributing \u201cThe Interview,\u201d a black comedy that ended with graphic images of Kim Jong Un being enveloped in a fiery explosion. (AP Photo\/Ahn Young-joon, File)<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Financial crimes<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In recent years, North Korea started <a href=\"https:\/\/motherboard.vice.com\/en_us\/article\/8xvnmv\/facebook-is-disrupting-north-korean-hacking-operations\" title=\"\" class=\"\">using cyber operations<\/a> to generate revenue for the government. This is done through several illicit means, including outright theft of funds, extortion and <a href=\"https:\/\/www.thecipherbrief.com\/kim-digs-cybercrime-coin-sanctions-cant-snatch\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover290628\">cryptocurrency mining<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In early 2016, the regime came close to stealing US$951 million from the <a href=\"https:\/\/www.nytimes.com\/2016\/05\/27\/business\/dealbook\/north-korea-linked-to-digital-thefts-from-global-banks.html\" title=\"\" class=\"\" data-original-title=\"\">Bangladesh Central Bank<\/a> over the global SWIFT financial network. Fortunately, because of a misspelling, they only succeeded in moving $81 million. Analysts attributed the attack to the \u201c<a href=\"https:\/\/www.cfr.org\/blog\/north-koreas-offensive-cyber-program-might-be-good-it-effective\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover311516\">Lazarus Group<\/a>,\u201d the same group believed to be behind many of the attacks tied to North Korea, including those against Sony and other banks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Lazarus Group has also been <a href=\"https:\/\/www.cnn.com\/2017\/12\/18\/politics\/white-house-tom-bossert-north-korea-wannacry\/index.html\" data-original-title=\"\" title=\"\" class=\"\">blamed<\/a> for the <a href=\"https:\/\/www.csoonline.com\/article\/3227906\/ransomware\/what-is-wannacry-ransomware-how-does-it-infect-and-who-was-responsible.html\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover92390\">WannaCry<\/a> ransomware that spread to computers in 150 countries in 2017. After encrypting data on a victim\u2019s computer, the malware demanded payment in the bitcoin digital currency to get access back.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">North Korea has been <a href=\"https:\/\/www.bloomberg.com\/news\/articles\/2018-01-02\/north-korean-hackers-hijack-computers-to-mine-cryptocurrencies\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover211586\">mining cryptocurrencies<\/a> on hacked computers as well. The hijacked machines run software that \u201cearns\u201d the digital currency by performing a computationally difficult task. The funds are then directed into an account tied to the hackers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">North Korean hackers also <a href=\"https:\/\/www.scmagazineuk.com\/more-evidence-emerges-of-north-korea-targeting-cryptocurrency-industry\/article\/719498\/\" title=\"\" class=\"\">attack cryptocurrency exchanges<\/a>. They have reportedly <a href=\"http:\/\/www.scmp.com\/news\/world\/article\/2131470\/north-korea-barely-wired-so-how-did-it-become-global-hacking-power\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover672938\">stolen millions of dollars<\/a> worth of bitcoin from two exchanges in South Korea and attempted thefts from 10 others.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>A cybercrime power<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Like other countries, North Korea uses cyber espionage and cyber sabotage to acquire secrets and harm adversaries. But it stands out from other countries in its use of <a href=\"https:\/\/www.fastcompany.com\/40525120\/north-korea-hackers-money-bitcoin-cryptocurrency-theft-sanctions\" title=\"\" class=\"\">cybercrime to finance<\/a> its programs. This is perhaps not surprising given North Korea\u2019s <a href=\"https:\/\/fas.org\/sgp\/crs\/row\/RL33324.pdf\" title=\"\" class=\"\">history of counterfeiting<\/a> U.S. currency and using other <a href=\"https:\/\/www.thedailybeast.com\/are-cyber-crooks-funding-north-koreas-nukes\" data-original-title=\"\" title=\"\" class=\"selected-link\" aria-describedby=\"popover980666\">illicit activities<\/a> to acquire funds.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The introduction of online transactions and digital currencies, coupled with inadequate cybersecurity, has opened the doors to North Korea for illicitly acquiring funds by new means. Given the country\u2019s appetite for building nuclear and other weapons, as well as the effects of economic sanctions, it seems likely that North Korea will continue to seek ways of exploiting the cyber world for economic advantage.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><i>Dorothy Denning is Emeritus Distinguished Professor of Defense Analysis, Naval Postgraduate School.<\/i><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><span class=\"js-paste-start-JCUO5QFXQZEITPL3VKJP6RNS4U\"><i>This article was originally published <a href=\"http:\/\/theconversation.com\/north-koreas-growing-criminal-cyberthreat-89423\" title=\"\" class=\"selected-link\" target=\"_blank\" data-original-title=\"\" aria-describedby=\"popover152149\">on The Conversation<\/a>.<\/i><span class=\"js-paste-end-JCUO5QFXQZEITPL3VKJP6RNS4U\"><br><\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>North Korea\u2019s cybercrime efforts \u2014 all seemingly state-sponsored \u2014 steal money that is then used to fund its cash-strapped government.<\/p>\n","protected":false},"author":7,"featured_media":30482,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":10,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[10],"tags":[],"coauthors":[7442],"class_list":["post-15996","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber"],"acf":{"subheadline":"","legacy_arc_id":"6GGGNHK3TBFM5B2734DOL44EHY","arc_canonical_url":"\/international\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>North Korea&#039;s growing criminal cyberthreat - C4ISRNet<\/title>\n<meta name=\"description\" content=\"North Korea\u2019s cybercrime efforts \u2014 all seemingly state-sponsored \u2014 steal money that is then used to fund its cash-strapped government.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"North Korea&#039;s growing criminal cyberthreat\" \/>\n<meta property=\"og:description\" content=\"North Korea\u2019s cybercrime efforts \u2014 all seemingly state-sponsored \u2014 steal money that is then used to fund its cash-strapped government.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/\" \/>\n<meta property=\"og:site_name\" content=\"C4ISRNet\" \/>\n<meta property=\"article:published_time\" content=\"2018-02-21T16:32:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T17:48:50+00:00\" \/>\n<meta name=\"author\" content=\"Dorothy Denning, Naval Postgraduate School\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dorothy Denning, Naval Postgraduate School\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"North Korea&#8217;s growing criminal cyberthreat\",\n\t            \"datePublished\": \"2018-02-21T16:32:47+00:00\",\n\t            \"dateModified\": \"2026-08-08T17:48:50+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/\"\n\t            },\n\t            \"wordCount\": 1174,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-653516378.jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Cyber\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/\",\n\t            \"name\": \"North Korea's growing criminal cyberthreat - C4ISRNet\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-653516378.jpg.jpg\",\n\t            \"datePublished\": \"2018-02-21T16:32:47+00:00\",\n\t            \"dateModified\": \"2026-08-08T17:48:50+00:00\",\n\t            \"description\": \"North Korea\u2019s cybercrime efforts \u2014 all seemingly state-sponsored \u2014 steal money that is then used to fund its cash-strapped government.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-653516378.jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-653516378.jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2018\\\/02\\\/21\\\/north-koreas-growing-criminal-cyberthreat\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Cyber\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/\",\n\t                    \"ad_zone\": \"cyber\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"North Korea&#8217;s growing criminal cyberthreat\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"description\": \"Media for the Intelligence-Age Military | C4ISRNET\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"caption\": \"C4ISRNet\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"North Korea's growing criminal cyberthreat - C4ISRNet","description":"North Korea\u2019s cybercrime efforts \u2014 all seemingly state-sponsored \u2014 steal money that is then used to fund its cash-strapped government.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"North Korea's growing criminal cyberthreat","og_description":"North Korea\u2019s cybercrime efforts \u2014 all seemingly state-sponsored \u2014 steal money that is then used to fund its cash-strapped government.","og_url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/","og_site_name":"C4ISRNet","article_published_time":"2018-02-21T16:32:47+00:00","article_modified_time":"2026-08-08T17:48:50+00:00","author":"Dorothy Denning, Naval Postgraduate School","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Dorothy Denning, Naval Postgraduate School","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"North Korea&#8217;s growing criminal cyberthreat","datePublished":"2018-02-21T16:32:47+00:00","dateModified":"2026-08-08T17:48:50+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/"},"wordCount":1174,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-653516378.jpg.jpg","articleSection":["Cyber"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/","name":"North Korea's growing criminal cyberthreat - C4ISRNet","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-653516378.jpg.jpg","datePublished":"2018-02-21T16:32:47+00:00","dateModified":"2026-08-08T17:48:50+00:00","description":"North Korea\u2019s cybercrime efforts \u2014 all seemingly state-sponsored \u2014 steal money that is then used to fund its cash-strapped government.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-653516378.jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-653516378.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2018\/02\/21\/north-koreas-growing-criminal-cyberthreat\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Cyber","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/","ad_zone":"cyber"},{"@type":"ListItem","position":3,"name":"North Korea&#8217;s growing criminal cyberthreat"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","name":"C4ISRNet","description":"Media for the Intelligence-Age Military | C4ISRNET","publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/c4isrnet\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization","name":"C4ISRNet","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","caption":"C4ISRNet"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/c4isrnet\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"C4ISRNet","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/c4isrnet","push-errors":false,"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-653516378.jpg.jpg","_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/15996","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/comments?post=15996"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/15996\/revisions"}],"predecessor-version":[{"id":16012,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/15996\/revisions\/16012"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/30482"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/media?parent=15996"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/categories?post=15996"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/tags?post=15996"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/coauthors?post=15996"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}